Pics in sig probs...
Asked Modified Viewed 3,973 times
asked
The issue I'm running into is when inserting a pic into my sig, when a forum thread is clicked on to view, it hangs the browser and will not show the thread.
The pic is one that I uploaded via admin to images (the "main" section) I use the direct url within the img tags in my profile sig.
I'm running v6.00.301, php 4.4.1, and mysql 5.8.7 My sig worked fine prior to the upgrade as well as for a few days afterwards. I did the upgrade when it came out and the error just started now.
I have tried re-uploading the forum folder, as well as all of the files directly in the root with no success in fixing it.
Hotlink protection on my host is disabled. I'm at a loss. Any ideas?
I'm also running another site on the same server, v6.00.207, and do not have any of the same issues.
the site with probs is www.beerisgoodfood.com
the one without any probs is www.socomjerks.com
Thanks for any ideas!
The pic is one that I uploaded via admin to images (the "main" section) I use the direct url within the img tags in my profile sig.
I'm running v6.00.301, php 4.4.1, and mysql 5.8.7 My sig worked fine prior to the upgrade as well as for a few days afterwards. I did the upgrade when it came out and the error just started now.
I have tried re-uploading the forum folder, as well as all of the files directly in the root with no success in fixing it.
Hotlink protection on my host is disabled. I'm at a loss. Any ideas?
I'm also running another site on the same server, v6.00.207, and do not have any of the same issues.
the site with probs is www.beerisgoodfood.com
the one without any probs is www.socomjerks.com
Thanks for any ideas!
Falk
Falk 131
Need help?, Having trouble?
• View our Documentation for Guides, Standards and Functions
• Name and Organize your Topics and Content correctly in the corresponding Forums for best support results
• Attaching Log Files and Screenshots when reporting issues will help
• Provide with an URL to live example if one exists
• Please read the How to Report an Error post
• Please read and comply with the Code of Conduct
• View our Documentation for Guides, Standards and Functions
• Name and Organize your Topics and Content correctly in the corresponding Forums for best support results
• Attaching Log Files and Screenshots when reporting issues will help
• Provide with an URL to live example if one exists
• Please read the How to Report an Error post
• Please read and comply with the Code of Conduct
(¯·._.·(¯°·._.·°º*[ Project Manager ]*º°·._.·°¯)·._.·¯)
- Super Admin, joined since
- Contributed 6,201 posts on the community forums.
- Started 639 threads in the forums
- Answered 11 questions
Yeah its the new img tag exploit fix in .3x. I'm working on it.
Alternative fix:
Replace this in maincore.php (app. line 371):
With
This exploit can be used to execute admin functions if the user viewing the image is an admin. So, rename the folder administration to something that can't be guessed.
In order for php-fusion to know you have renamed your administration folder you'll need to edit the ADMIN definition on approx. line 82:
Alternative fix:
Replace this in maincore.php (app. line 371):
Code Download source
$text = preg_replace_callback("#\[img\]((http|ftp|https|ftps)://)(.*?)(\.(jpg|jpeg|gif|png|JPG|JPEG|GIF|PNG))\[/img\]#si","isImage",$text);With
Code Download source
$text = preg_replace("#\[img\]((http|ftp|https|ftps)://)(.*?)(\.(jpg|jpeg|gif|png|JPG|JPEG|GIF|PNG))\[/img\]#sie","'<img src=\'\\1'.str_replace(array('.php','?','&','='),'','\\3').'\\4\' style=\'border:0px\'>'",$text);This exploit can be used to execute admin functions if the user viewing the image is an admin. So, rename the folder administration to something that can't be guessed.
In order for php-fusion to know you have renamed your administration folder you'll need to edit the ADMIN definition on approx. line 82:
Code Download source
define("ADMIN", BASEDIR."youradminfolder/");Edited by Falk on 28-12-2005 14:38,
answered
Thanks!
I should have time to make those changes later tonight. I'll drop a note back letting you know how it goes.:D
I should have time to make those changes later tonight. I'll drop a note back letting you know how it goes.:D
— 2 months later —
Thanks!! worked instantly!! html is disabled though but as BB code works now it doesnt matter.
Thanks again!
Thanks again!
— 1 month later —
Fractal_Fragger
Fractal_Fragger 10
- Newbie, joined since
- Contributed 2 posts on the community forums.
well i have modded my maincore lately with the forum extreme and the enhanced shoutbox when i put that in i cant even click the buttons let alone display the tag
Category Forum
Bugs and Errors - 6Labels
None yet
Statistics
- Views 0 views
- Posts 4 posts
- Votes 0 votes
- Topic users 4 members
0 participants
Notifications
Track thread
You are not receiving notifications from this thread.
Related Questions